Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          NOZ3rk0hVWd3XRzsg/HBVRriJVEGke9hnptW38HlmY8=
Subject key identifier:   CE:B9:0F:23:5A:6A:65:AB:D8:5E:89:F8:55:82:89:77:CB:54:E6:06
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       43047D72591F46CA46A6DA0A84B21941085B615B
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:33:42 +0000
ROA not before:           Wed 10 Jan 2024 17:28:42 +0000
ROA not after:            Wed 08 Jan 2025 17:33:42 +0000
asID:                     265303
IP address blocks:        201.87.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:7d:72:59:1f:46:ca:46:a6:da:0a:84:b2:19:41:08:5b:61:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:28:42 2024 GMT
            Not After : Jan  8 17:33:42 2025 GMT
        Subject: CN=CEB90F235A6A65ABD85E89F855828977CB54E606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:57:8f:76:33:da:2a:ab:19:8d:51:9c:81:
                    02:c2:a3:27:d3:51:28:1d:6c:5f:7f:98:a2:08:bc:
                    26:81:67:86:52:07:cc:cc:15:12:aa:8f:45:1a:c5:
                    06:fa:da:ba:d5:90:3e:26:7e:ef:de:76:d8:ef:6a:
                    5e:51:46:8b:06:13:e4:5c:f7:65:bb:7a:06:02:eb:
                    16:4b:50:28:56:83:1b:aa:d2:81:3b:0b:29:90:4b:
                    8d:58:b9:4c:56:06:16:23:b1:fb:03:2e:3f:50:53:
                    29:23:63:35:f3:4a:b3:4f:34:6e:2b:17:a7:e0:97:
                    d7:1b:ff:63:3e:23:68:d2:ef:e9:94:34:e0:3d:b6:
                    88:80:ce:4c:6e:93:fa:af:65:9c:74:81:07:4d:0a:
                    d0:f9:84:05:47:37:a2:e3:89:ee:32:86:05:a1:ef:
                    9a:8c:4c:e0:21:e8:43:5a:44:62:d3:5a:ad:85:41:
                    17:4b:0b:ea:7d:11:c3:58:35:93:f4:f9:55:70:b3:
                    9d:ce:81:53:6c:2c:86:04:27:f3:c6:43:b6:d4:5c:
                    55:a8:2f:6a:b6:29:3b:00:4b:28:56:bf:db:15:4a:
                    51:9d:e7:f4:27:98:f6:01:d8:4f:5b:be:25:07:27:
                    c2:9a:1e:b2:3e:eb:5b:aa:34:ea:87:dd:52:e9:70:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:0F:23:5A:6A:65:AB:D8:5E:89:F8:55:82:89:77:CB:54:E6:06
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134382e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:da:4b:24:75:88:4e:66:ea:5f:8e:e6:ec:8e:30:d7:a3:b7:
         fd:a4:b1:3f:a0:f8:bf:4e:e5:65:1d:7c:eb:36:b4:20:f9:4b:
         87:4c:46:d7:84:76:ee:80:fa:42:8d:98:ef:e3:5e:ec:ed:1c:
         fa:c7:19:97:9f:6a:aa:44:19:52:ad:98:f6:c0:76:72:a3:6d:
         37:b7:ad:d8:9d:b4:41:46:22:c5:4a:1b:5f:e0:3a:cd:68:ff:
         26:87:8f:f3:e3:76:92:2e:6e:fe:ec:21:c3:91:5c:78:ae:d4:
         f5:25:18:47:8d:ec:55:03:81:23:a8:37:43:4f:fe:0c:19:b4:
         28:a3:3a:25:21:f0:8f:84:29:a3:6e:65:fb:dc:bc:9e:5b:39:
         25:66:b1:09:b8:85:e5:5e:d8:13:35:10:89:b9:7a:72:10:6e:
         b6:5a:c3:96:b9:c4:f3:b9:7a:53:56:0c:79:ec:72:85:4a:58:
         6d:d9:c9:73:b8:8c:67:39:a0:a2:5b:a3:1d:25:11:5d:0e:b9:
         67:b5:fe:71:99:98:e8:f1:33:9c:66:bd:40:3d:b5:ca:2e:9f:
         57:f8:3e:5e:65:44:b0:39:3f:b4:07:8d:42:11:96:7b:ad:2e:
         9d:ec:ec:00:bc:a0:8a:80:32:ae:b1:21:ae:b7:0b:0e:02:12:
         e6:40:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org